CVE-2026-84651mediumCWE-284

CVE-2026-84651: falha de média gravidade em Jenkins

Publicada em

Seguir esta CVE+ Monitorar Jenkins

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.5%
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure permission on one agent to take over a different agent, gaining control of its configuration and obtaining access to its inbound agent secret and environment variables.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Jenkins Project · Jenkins
CVEs relacionadas — Jenkins

No mesmo produto, das mais perigosas para as menos.

CVE-2024-23897CRITICALCVE-2024-23897EPSS 100.0%KEVCVE-2024-23898HIGHCVE-2024-23898EPSS 67.2%CVE-2026-53435HIGHCVE-2026-53435EPSS 51.2%CVE-2024-43044HIGHCVE-2024-43044EPSS 28.8%CVE-2025-59474MEDIUMCVE-2025-59474EPSS 5.0%CVE-2023-43494—CVE-2023-43494EPSS 3.9%